AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-86499

JetBrains YouTrack: missing authorization

JetBrains

CVE-2026-86499 · Published Sep 7, 2026 · updated Sep 8, 2026

Medium4.3
Fix: upgrade to 2026.1.14047 or later
JetBrains advisory

In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2026.1.140472026.1.14047
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More JetBrains advisories

All JetBrains
Low 3.3Sep 7JetBrains IntelliJ IDEA: information disclosureCVE-2026-86505fixed in 2026.2.2Medium 5.9Sep 7JetBrains GoLand: missing authenticationCVE-2026-86506fixed in 2026.2.2.1Medium 6.8Sep 7JetBrains YouTrack: information disclosureCVE-2026-86497fixed in 2026.2.18769High 7.7Sep 7JetBrains YouTrack: improper authorizationCVE-2026-86498fixed in 2025.3.160480 +1Medium 5.5Sep 7In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user...CVE-2026-86500fixed in 2026.1.14047Low 2.8Sep 7JetBrains IntelliJ IDEA: secrets in logsCVE-2026-86501fixed in 2026.2.2